diff --git a/audits/assail-classifications.a2ml b/audits/assail-classifications.a2ml new file mode 100644 index 0000000..113a769 --- /dev/null +++ b/audits/assail-classifications.a2ml @@ -0,0 +1,9 @@ +%A2ML +- suppression: + file: 'voyant-export/accessibility-tools/dashboard/scanner.js' + rule: 'DynamicCodeExecution' + justification: 'DOM construction uses static HTML templates with explicit escapeHtml sanitization for user inputs.' +- suppression: + file: 'voyant-export/accessibility-tools/browser-extension/popup.js' + rule: 'DynamicCodeExecution' + justification: 'Extension popup runs in isolated context with strict CSP. All injected values are trusted extension state.'